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Abstract 

(N ■ 

Random numbers are essential for applications ranging from secure 
' communications to numerical simulation and quantitative finance. Algo- 

. rithms can rapidly produce pseudo-random outcomes, series of numbers 

■ that mimic most properties of true random numbers while quantum ran- 

' dom number generators (QRNGs) exploit intrinsic quantum randomness 

^ , to produce true random numbers. Single-photon QRNGs are conceptually 

simple but produce few random bits per detection. In contrast, vacuum 
fluctuations are a vast resource for QRNGs: they are broad-band and 
thus can encode many random bits per second. Direct recording of vac- 
uum fluctuations is possible, but requires shot-noise-limited detectors, at 
the cost of bandwidth. We demonstrate efficient conversion of vacuum 
. fluctuations to true random bits using optical amplification of vacuum 

S_i ' and interferometry. Using commercially-available optical components we 

demonstrate a QRNG at a bit rate of 1.11 Gbps. The proposed scheme 
has the potential to be extended to 10 Gbps and even up to 100 Gbps 
by taking advantage of high speed modulation sources and detectors for 
optical fiber telecommunication devices. 



1 Introduction 

The need for random numbers in research and technology was recognized very 
early [T], and has motivated electronic and photonic advances [2^4] . Random 
numbers support critical activities in advanced economies, including secure com- 
munications [5HZ] ! numerical simulation [5] and quantitative finance [5] . For this 
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reason, there has been intense effort to develop practical true random number 
generators, to replace existing pseudo-random methods. QRNGs employ a true 
source of randomness known to science, the randomness embedded into quan- 
tum physics. Recently, it has been shown that quantum physics also can be 
used to verify the randomness of entanglement-based generators PH1III] . 

Examples of demonstrated QRNGs include two-path splitting of single pho- 
tons [12) , photon- number path entanglement [13] , time of generation or counting 
of photons [TITUS] , fluctuations of the vacuum state using homodyne detection 
techniques [ini[2D] as well as interferometric schemes [2"TM23| . 

Although any quantum measurement provides some randomness, a practical 
source must be simultaneously fast, inexpensive, and robust. For this purpose, 
fluctuations of the quantum vacuum are very attractive because the electric field 
amplitude is a continuous quantity, a single measurement can yield many true 
random bits. True vacuum is also perfectly white, uncorrelated, and broadband; 
the quantum field renews its random value arbitrarily quickly. Guaranteeing 
true vacuum is far from trivial, however; any scattered light will contribute a 
non-random component to the field measurement. Here we demonstrate ex- 
traction of random bits from vacuum using optical amplification. Homodyne 
detection based schemes [THldnim] guarantee that the signals originate in vac- 
uum noise. Our method relies on the vacuum noise fluctuations as homodyne 
detection schemes, and at the same time achieves high bandwidth, because the 
requirement for shot-noise-limited detection is removed. 

Relative to demonstrated methods for QRNG and achieved speeds, our pro- 
posed device is not only highly integrated, using commercially available compo- 
nents, but also has other advantages. In particular, the strong current modu- 
lation, well above and below threshold, ensures true randomness from vacuum. 
This active gain control allows a single device to have both a short coherence 
time, for rapid extraction of uncorrelated random bits, and a high signal level. 
In this way, standard photodiodes can be used. Furthermore, due to the high 
power of the signal pulses, the signal-to-noise ratio (SNR) is high. Hence, sev- 
eral random bits per detection event can be generated, limited by the classical 
noise of the measurement equipment. To our knowledge, it is the first time that 
our use of current gain modulation is used in QRNG. 



2 Device operation 

We use a distributed feedback (DFB) laser diode (LD) as the oscillator, pro- 
viding single-mode operation and high modulation bandwidth. The DFB LD is 
directly modulated at around 100 MHz by a train of ~ 1 ns electrical pulses, 



as shown in Fig. 1(a) A polarization-maintaining, all- fiber unbalanced Mach- 



Zchnder interferometer (MZI) with a relative delay of t\ oop w 10 ns provides 



stable single-mode operation of the interferometer, as shown in Fig. 1(b) 

The LD is set with 25 mA DC bias current, far below its threshold value of 
36 mA. Phase-randomized coherent optical pulses of 400 ps time width and 3.5 
mW peak power are produced. A 30 dB optical isolator (OI) is placed just after 
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Figure 1: Unbalanced Mach-Zehnder interferometer. Due to the random phase 
of the different input pulses, the output signals acquire random amplitudes, 
(a) Measured drive current (red, upper curve) and detected laser power (blue, 
lower curve), showing amplitude repeatability and clear pulse separation, (b) 
(LD Pulse Driver) denotes the electrical pulse generator to directly modulate the 
laser, (LD) laser diode, (01) optical isolator, (PMF) polarization maintaining 
fiber, (4>o-3) optical phases of different consecutive pulses, (PMC) polarization 
maintaining coupler, (<pi oop ) phase introduced by the delay line and (PIN) fast 
photodiode. 
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the LD to avoid back reflections into the oscillator cavity. Then, the linearly 
polarized optical pulses are split in power using a polarization maintaining cou- 
pler (PMC) with a hxed coupling ratio. In one of the output ports of the PMC, 
a 2 m polarization maintaining fiber (PMF) patchcord is connected, which cor- 
responds approximately to the equivalent length of the PRF. Both arms of the 
interferometer are connected to a second PMC where the interference between 
pulses takes place. The overall interferometer setup, at the output, has power 
coupling ratios of Tf 2 ps 49.8% and R\ 2 ps 40.3%, and polarization isolation 
of 23.98 dB and 25.23 dB for the two arms. At one of the output ports of the 
interferometer, a 150 MHz photodiode is connected to collect the different inter- 
fering optical pulses which are processed by a fast oscilloscope. The oscilloscope 
is operated with a 200 MHz bandwidth for the input channel, triggered by the 
system clock reference. 

The path delay difference of the interferometer can be adjusted to temporally 
overlap subsequent pulses. On the one hand, the time delay between interfering 
pulses can be controlled by fine tunning the propagation properties of the long 
arm of the interferometer to change the parameter 4>i 00 p- For instance, by 
changing the temperature of the optical fiber one can produce a refractive index 
change and also thermal expansion of a wavelength for a 0.03°C temperature 
change, corresponding to 4.25 fs. Albeit, the time adjustment range achievable is 
limited compared to the pulse repetition period ~ 10 ns. On the other hand, the 
interferometer can be temperature stabilized to 0.01°C to keep the parameter 
4>ioo P and the PRF changed to increase or decrease the time between successive 
pulses. The time delay difference between both arms of the MZI is related to 
the PRF as At = 1/PRF, which allows an accurate and larger time adjustment 
range. The path delay difference of the interferometer was adjusted by setting 
the PRF at 97.6 MHz. 



3 Laser physics analysis 

The method operates on the field within a single mode of a semiconductor diode 
laser. As shown in Fig. [5J the laser is first operated far below threshold, produc- 
ing simultaneously strong attenuation of the cavity field and input of amplified 
spontaneous emission (ASE). This attenuates to a negligible level any prior co- 
herence, while the ASE, itself a product of vacuum fluctuations, contributes 
a masking field with a true random phase. The laser is then briefly taken 
above threshold, to rapidly amplify the cavity field to a macroscopic level. The 
amplification is electrically-pumped and thus phase-independent. Due to gain 
saturation, the resulting field has a predictable amplitude but a true random 
phase. The cycle is repeated, producing a stream of phase-randomized, nearly 



identical optical pulses. As shown in Fig. 1(b) interference of subsequent pulses 
converts the phase randomness into a stream of pulses with random energies, 
which is directly detected and digitized. 

During the attenuation phase, the cavity field is described by the Langevin 
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(a) Loss mechanism (b) Gain mechanism 
scheme. scheme. 



Figure 2: Generation of amplified vacuum within the laser cavity, (a) The LD 
is first taken below threshold, to attenuate the cavity field to a weak thermal 
state (in red), independent of its previous value (in blue), (b) The LD is then 
taken above threshold, so that phase-insensitive amplification brings the field 
amplitude |a| to a level fixed by saturation, while the phase retains the random 
thermal-state value. 



equation: 

d 1 

—a = -icua--"fa + r, (i) 

where a is the field operator for the mode, uj is its angular frequency, 7 is the 
(energy) decay rate and T — 7 1 / 2 a rcs + Tase is a noise operator, with a res a 
reservoir mode. The first term is from attenuation [25], and the second from 
ASE. We can estimate 7 = 7 cav -I- 7 ma t as follows: The cavity contribution 
is 7cav = — eln(-R)/(2n£) = 5 x iO 10 s _1 , where c is the speed of light in 
vacuum, R — 0.3 is the out-coupler reflectivity, n — 3.6 is the refractive index, 
and L = 300/im is the cavity length. The material contribution 7 ma t ranges 
from ca/n w fO 11 s^ 1 at zero current to 7 ma t = — 7 cav at threshold. Here a ss 
10 4 cm -1 is the intrinsic absorption of GaAs at 852nm [2B]. Interpolating, at 70% 
threshold current, we obtain 7 I0 11 s _1 , or about 400 dB/ns. This renders 
completely negligible any prior coherence in the cavity, and the remaining field 
is an equilibrium between ASE and attenuation. The phase of this field is a 
true quantum random variable, its value determined by ASE which is driven by 
vacuum fluctuations. When the laser is taken above threshold, the equilibrated 
field is amplified, limited by gain depletion [27], to produce observed output 
powers of P ~ 3.5 mW or i.5 x IO 7 photons/ns, with about P/7 cav ~ 3 x IO 5 
photons in the cavity. The amplification is phase-insensitive, and the phase of 
the cavity field remains truly random. 

Considering the speed limits of this technique, we note that even at a mod- 
ulation rate of 20 GHz, i.e., an attenuation time of ~ 0.25 ns, the attenuation 
is 100 dB. The field contribution remaining from the previous pulse is 3 x 10 -5 
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photons, or s» 15 bits below the vacuum fluctuations. The physics of the process 
can thus support QRNG rates in excess of 100 Gbps. 



4 Characterization of the coherence of the laser 
pulses 

The interferometric setup allows us to determine the first order coherence prop- 
erties of the laser pulses, described by the correlation functions G(t) = J dt { E^~' 
(t)E^ + \t + t) ), or its normalized version g (r) = G(t)/G(0). Here E^ are 
the positive- and negative-frequency parts of the emitted field E and inte- 
grals are taken over the duration of the pulse. We expect the pulse ener- 
gies G(0) to be narrowly distributed, and <?(i r cp) to have near-unit magni- 
tude and random phase, where t rep corresponds to the time between succes- 
sive pulses given by the pulse repetition frequency (PRF), as subsequent pulses 
have very similar envelopes and random phases <j). The interferometer out- 
put is E out (t) = T\2E(t) + i?i2-E(i + iioop) where Ti2,i?i2 indicate combined 
transmission and reflection coefficients through the two beamsplitters. If we 
define the pulse energy in both arms of the interferometer as u, = R\ 2 G(Q) 
and Uj+i = T 1 2 2 G(0), the energy at the output port of the interferometer, 
z4 out) = fdt{ E^(t)E^(t) h is given by 

= U i + v i+l + 2 l3(*loop)| y/UiVi+i COS ((pi - 4> i+ i - 01oop) (2) 

where 4>\ 00 p = wti oop is the phase introduced by the delay loop. We measure the 



relevant statistics as follows (data shown in Fig. 3(a) I: narrow distributions of 
Ui and Vi + i are directly observed by blocking one or the other path. Interference 
leads to a broadening of the observed distribution, with the broadest distribution 
corresponding to t lcp — t\ oop . From the width of the i4° ut ^ distribution and the 
mean values of Ui,v i+ i, we can estimate the interference visibility |<?(ii 00 p)| ~ 
90.22%. To demonstrate that the laser pulses are phase-uncorrelated, we collect 
statistics both for ^>i oop fixed, and for (?!>ioop swept over several w, obtained 
by heating the fiber loop during acquisition. Results, shown in Fig. |3(b)[ 
are statistically identical, indicating the absence of any phase relation between 
subsequent pulses. 



5 Statistical testing 

The output of the PIN photodiodc was highpass filtered with a cutoff frequency 
of 40 MHz and digitized using the waveform integration function of an oscillo- 
scope with input bandwidth 200 MHz, sampling speed of 2.5 Gsps and a 12-bit 
analog-to-digital converter (ADC). The 10 ns time range setting, compliant with 
the PRF, and sampling speed of the oscilloscope permits to acquire 25 samples 
over a pulse. The oscilloscope translates the multiple samples per pulse to a sin- 
gle measurement. The nearly uniform distribution of observed energies permits 
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Figure 3: Inter-pulse coherence measured by output energy distributions, (a) 
Distributions for: individual pulse energies itj,i>j +1 , interfering pulse energies 

?t! out ' under different PRF and hence different t rcp . (b) Output pulse energy 
histogram for delay- loop temperatures of 25 °C (fixed), and 24 °C to 26 °C 
(scanned). Loop phase has no observable effect on the distribution, indicating 
statistical independence of the pulses' phases. 



the use of equally-sized encoding bins, and facilitates calibration. Records of 10 6 
output pulses were collected in order to characterize the statistical correlations 
of the acquired raw data and to determine the number of extractable random 
bits per pulse. The normalized correlation of successive samples as a function 
of sample delay of the raw data is computed as the modulo-N circular auto- 
correlation for finite length sequences and it is normalized to the maximum, 



shown in Fig. 4(a) The correlation of data samples follows a delta-function 
like behavior which indicates a random sequence with low impact of drifts in the 
system. The quantum random bit content of the recorded signal is determined 
as follows: The pulse distribution of Fig. [3] is divided into 2 b equally-sized bins 
and the Shannon entropy is calculated. As shown in Fig. |4(b)| the entropy 
increases linearly with b, up to the value b — 12, where it saturates to 11.8 bits 
of entropy. The same procedure, applied to the detection noise, finds the clas- 
sical noise entropy. Subtracting the noise entropy, the quantum optical noise 
contribution reaches a level of 11.1 bits per pulse at b = 12. Multiple samples 
per pulse achieves larger accuracy when used together with higher resolution 
ADC. This allows to better bound the contribution of the classical noise and 
thus permits to extract more true random bits per pulse. 

The observed classical noise, however random it may appear, could in princi- 
ple be the result of a completely predictable process. Indeed, randomness tests 
(described below) detect patterns in the recorded classical noise. To completely 
remove these patterns, we first note that the entropy of the classical noise places 
an upper bound on the information it can contain. We then remove this quantity 
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Figure 4: Measured correlation and entropy of acquired pulses, (a) Normalized 
correlation of successive samples as a function of sample delay of the raw data. 
The correlation data samples follows a delta-function like behavior indicating a 
random sequence, (b) Total entropy, calculated from the measured distribution 
shown in Fig. [31 Distribution is divided into 2 b bins, from which the Shannon 
entropy is calculated. Optical contribution, up to 11.1 bits per pulse, is found 
by subtracting entropy of the measured electronic noise. 



of information, using cryptographic hash functions, from the combined quan- 
tum and classical noise [19j . We use the Whirlpool hash function [2S]; other 
standard randomness extractors could have also been employed [2S||3D]. These 
cryptographic functions mix the input data bits, increasing the theoretically 
secure entropy per bit at the cost of losing output bits. The reduction factor 
of the hash function applied to the collected raw bits is 1.08. As a result, we 
obtain that the random bit generation rate of the current device accounts to 
1.11 Gbps. 

We have performed all tests of randomness from TestUOl 31 . Considering 
the optical pulse data set, some test fail when applied to the raw data set, while 
they were successfully passed when applied to the hashed data set. Confirming 
that the hashing removes any remaining predictable behavior and increases the 
entropy per bit. Instead, the classical noise data set fails some tests both before 
and after hashing, using the same hashing factor. 



6 Conclusions 

In conclusion, we have demonstrated high-bandwidth extraction of random bits 
from quantum vacuum fluctuations using optical amplification. The use of 
strong attenuation followed by amplification guarantees that the signal origi- 
nate from quantum noise, and provides macroscopic signals compatible with 
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the highest bandwidth detection. With commercially-available components, we 
demonstrate over 1 Gbps true random number generation. The QRNG device 
is low power consumption, robust, and can be easily automated allowing it to 
have a long operational lifetime. Consideration of the laser physics indicates 
that rates above 10 Gbps and even 100 Gbps are possible. The high random 
numbers generation rate extends the practical applications of our method to 
erode the dominance of currently used classical RNG choices. The method can 
be applied to high speed secure communication, to the gambling industry and 
to cryptography. 
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